Photo Video Maker Japanese
v1.0.0turn photos and images into photo slideshow video with this photo-video-maker-japanese skill. Works with JPG, PNG, HEIC, WebP files up to 200MB. Japanese con...
⭐ 0· 56·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (photo-to-slideshow via cloud GPU) match the operations in SKILL.md: creating sessions, uploading images, SSE-based edit chat, and export endpoints. Requesting a NEMO_TOKEN is proportionate for a third-party render API.
Instruction Scope
The instructions explicitly upload user images and metadata to a remote endpoint (https://mega-api-prod.nemovideo.ai) and may create/refresh an anonymous token automatically. That behavior is expected for this service, but it means user files are transmitted to a third party and the agent will make network calls, open SSE streams, and poll for job status.
Install Mechanism
No install spec and no code files (instruction-only). This minimizes disk write/execute risk; runtime activity is network/API calls as described in SKILL.md.
Credentials
Only NEMO_TOKEN is declared as required (primaryEnv), which fits the API usage. However, SKILL.md frontmatter mentions a config path (~/.config/nemovideo/) that isn't listed in the registry metadata — an inconsistency. The skill will also generate an anonymous token via the service if no NEMO_TOKEN is present, which implies creating/holding credentials for up to 7 days.
Persistence & Privilege
The skill is not always-enabled and does not request system-wide privileges. It does not declare modifications to other skills or system-wide config. Autonomous invocation is enabled (platform default) but not combined with broad/unrelated credentials.
Scan Findings in Context
[no-regex-findings] expected: Scanner found no code to analyze because this is instruction-only. Absence of findings is expected but not proof of safety — the runtime instructions (network uploads) are the main surface.
Assessment
This skill will upload your photos and create short-lived tokens on a third-party backend (mega-api-prod.nemovideo.ai). If you install or use it: 1) don't upload sensitive or private images unless you trust the service and have read its privacy terms; 2) ask how/where the anonymous NEMO_TOKEN is stored (environment vs disk) if you care about credential persistence; 3) note a small metadata inconsistency (SKILL.md references ~/.config/nemovideo/ though the registry metadata didn't list it) — ask the publisher how that path is used; and 4) if you require guarantees about deletion or retention of uploaded media, confirm them with the service before using the skill.Like a lobster shell, security has layers — review code before you run it.
latestvk97f0y16h5yfsgzebnbg7f8bb184n6ex
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎌 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN